NEC Express5800 Series Maintenance Manual page 111

Chapter 2 Useful Features
iv-1. Enroll Signatures
When you select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security > Secure
Boot Settings > Advance Secure Boot Options > DBX - Forbidden Signature Database > Enroll Signature
from the System Utilities, the Enroll Signature menu appears.
For details about the options, see the table below.
Option
Enroll Signature using
File
Signature Owner GUID
(optional)
Signature GUID
(optional)
Signature Format
Commit changes and
exit
Discard changes and
exit
v. DBT - Timestamp Signatures Database
When you select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security > Secure Boot
Settings > Advance Secure Boot Options > DBT - Timestamp Signatures Database from the System Utilities, the
DBT - Timestamp Signatures Database menu appears.
For details about the options, see the table below.
Option
Enroll Signatures
Delete Signature
Parameter
-
[Other]
Hewlett Packard Enterprise
Company
Hewlett-Packard Company
Microsoft Corporation
SUSE Linux Products HmbH
String of 32 digits ("0" to "9") and
alphabetic characters "A" to "F"
SHA256
SHA384
SHA512
[RAW]
-
-
Parameter
-
-
Express5800/R120h-1E, R120h-2E Maintenance Guide
Description
Enrolls the signature using a file.
Select the Signature Owner to use their Signature
GUID in the Certificate.
Enter the optional security certificate Signature
GUID. You must enter the data in the following
GUID format:
11111111-2222-3333-4444-1234567890ab. For
Hewlett Packard Enterprise certificates, enter
1E910BE1-4BEB-6337-19F1-8A8AC107D512. For
Hewlett-Packard certificates, enter
F5A96B31-DBA0-4faa-A42A-7A0C9832768E. For
Microsoft certificates, enter
77fa9abd-0359-4d32-bd60-28f4e78f784b. For
SUSE certificates, enter
2879c886-57ee-45cc-b126-f92f24f906b9.
Select the certicate format used to enroll certificate
into database. Ensure correct signature format
SHA256/SHA384/SHA512 is selected for the
certificate with EFI_CERT_X509_SHA*_GUID
signature type. For all other certificate types please
select RAW signature format.
Commit changes and exit.
Discard changes and exit
[
Description
Enrolls the signature.
Deletes the enrolled signature.
1. System Utilities
]: Default setting
111